Commit cd727bb
authored
fix(deps): Resolve all npm audit vulnerabilities (#3199)
Update dependencies and add overrides to fix security vulnerabilities:
Root package:
- Bump protobufjs ^7.3.0 -> ^7.5.5 (critical: arbitrary code execution)
- Add overrides for fast-xml-parser, serialize-javascript, picomatch,
flatted, brace-expansion, yaml, underscore, lodash, minimatch
demos/browser:
- Bump vite ^7.3.1 -> ^7.3.2 (high: path traversal, WebSocket read)
- Bump lodash ^4.17.20 -> ^4.17.24 (high: prototype pollution)
- Add overrides for fast-xml-parser, picomatch
integration:
- Bump mocha ^10.2.0 -> ^10.8.2
- Add overrides for fast-xml-parser, serialize-javascript, picomatch,
brace-expansion
All three directories now report 0 vulnerabilities from npm audit.
Addresses all open dependabot PRs for these packages.1 parent 1b08327 commit cd727bb
6 files changed
Lines changed: 4300 additions & 12273 deletions
File tree
- demos/browser
- integration
0 commit comments